WO2016095555A1

WO2016095555A1 - Working method for multi-seed one-time password

Info

Publication number: WO2016095555A1
Application number: PCT/CN2015/087772
Authority: WO
Inventors: 陆舟; 于华章; 李明基
Original assignee: 飞天诚信科技股份有限公司; 海博思科信息系统有限公司
Priority date: 2014-12-15
Filing date: 2015-08-21
Publication date: 2016-06-23
Also published as: US20170293751A1; US10255421B2; CN104506319B; CN104506319A

Abstract

Disclosed is a working method for a multi-seed one-time password, which falls within the field of information security. The method comprises: powering and initialising a one-time password, opening a total interrupt, initialising the state of a system, and then entering a sleep mode; when the one-time password detects the interrupt, awakening the one-time password from the sleep mode, and entering an interrupt processing flow; after the interrupt processing flow is ended, checking each awakening flag; and executing a processing flow corresponding to the set awakening flag. According to the present invention, a user can burn seed data into the one-time password by operating the one-time password, and can update the seed data in the one-time password. In addition, according to the present invention, the one-time password is capable of storing and managing a plurality of seeds. In a process of using the one-time password, a one-time command can be generated using the corresponding seed data according to the selection from the user, which is convenient for the user to use. In addition, the reliability and security of the seed data are guaranteed by means of binding between a unique identifier of the one-time password and the seed data.

Description

A working method of multiple sub-dynamic tokens

Technical field

The invention relates to a working method of a plurality of sub-dynamic tokens, and belongs to the field of information security.

Background technique

In the prior art, a One-time Password (OTP) is a safe and convenient account anti-theft technology. According to a special algorithm, an unpredictable random number combination is generated as a password, and each password can be used only once. When the user performs authentication, in addition to inputting the account number and static password, the user must be required to input a dynamic password. Only through system authentication can the user log in or trade normally, thereby effectively ensuring the legality and uniqueness of the user identity. The biggest advantage of dynamic tokens is that the passwords used by users are different each time, so that criminals can not fake the identity of legitimate users. The dynamic password authentication technology is considered to be one of the most effective ways to solve the user's identity authentication method at present, which can effectively prevent the loss of the user's property or data caused by various network problems such as hacking Trojans stealing user account passwords and fake websites. Currently widely used in online banking, online games, telecom operators, e-government, enterprises and other fields.

The seed data in the current dynamic token is built in the dynamic token by the dynamic token manufacturer before the dynamic token is shipped from the factory. After the dynamic token is activated, the user is not allowed to update, and only for a single application. Not only brings inconvenience to the user's use, but also wastes hardware resources.

Summary of the invention

The object of the present invention is to provide a method for working a plurality of sub-dynamic tokens, wherein the dynamic token can store and manage a plurality of seeds, and the user is convenient to use, and the reliability and security of the seed data are high.

To this end, the present invention provides a method for working with a plurality of sub-dynamic tokens, the basic implementation process of which is as follows:

Step S1) The dynamic token is powered on and initialized, the total interrupt is turned on, the system state is set to the first preset state, and the sleep mode is entered, waiting to be awakened;

Step S2) the dynamic token is awakened when detecting an interrupt, enters an interrupt processing flow, and after the end of the interrupt processing flow, step S3 is performed;

The interrupt processing procedure includes: the dynamic token determines whether the button interrupt flag is set, and if the button wake-up flag is set, resetting the button interrupt flag, the interrupt processing flow ends, otherwise the interrupt processing flow ends, wherein, when When the button of the dynamic token is pressed, the button interrupt is triggered, and the button interrupt flag is set;

Step S3) The dynamic token checks the button wake-up flag. If the button wake-up flag is set, the button processing flow is entered. After the button processing flow ends, the sleep mode is re-entered, waiting to be awakened, returning. Step S2;

The button processing flow includes:

Step a) the dynamic token acquires a key value, determines a key value and a system state, and when the key value is the first preset key value and the system state is the first preset state, performing step b; when the key value is the second pre- Step c is performed when the key value is set and the system state is the second preset state; step d is performed when the key value is the second preset key value and the system state is the third preset state; and when the key value is the second preset key Step e is performed when the value is the fifth preset state, and step f is performed when the key value is the third preset key value and the system state is the second preset state; when the key value is the third preset key value and Step g is performed when the system state is the third preset state; otherwise, step h is performed;

Step b) the dynamic token display function menu, initialize the function menu index, set the system state to the second preset state, and perform step h;

Step c) The dynamic token determines an operation selected by the user according to the function menu index. If the operation selected by the user is to generate a password, the seed data menu is displayed, the seed menu index is initialized, and the system state is set to a third preset state. Step h is performed. If the operation selected by the user is to write seed data, the pre-stored dynamic token serial number is obtained and displayed. Show, set the system state to the fifth preset state, and perform step h;

Step d) The dynamic token reads the seed data corresponding to the seed menu index stored in the dynamic token, generates a dynamic password according to the read seed data, and displays the system state as a sixth preset. Status, step h;

Step e) The dynamic token collects light sensing data, and determines whether the serial number in the collected light sensing data matches the pre-stored dynamic token serial number, and if yes, stores the seed data in the collected light sensing data. And generating a dynamic password according to the newly stored seed data, displaying, setting the system state to the sixth preset state, performing step h, if not, clearing the collected light sensing data, and acquiring the pre-stored dynamic token serial number And displaying, setting the system state to the fifth preset state, performing step h;

Step f) the dynamic token updates the function menu index, performing step h;

Step g) the dynamic token updating the seed menu index, performing step h;

Step h) The dynamic token resets the button wake-up flag, and the button processing flow ends.

Preferably, the step c may further include: if the operation selected by the user is to update the seed data, the dynamic token displays the seed data menu, initializes the seed menu index, sets the system state to the fourth preset state, and performs steps. h;

Correspondingly, in the step c, when the operation selected by the user is to write the seed data, the method further includes: setting the added seed data flag;

The step a further includes: when the key value is the second preset key value and the system state is the fourth preset state, the dynamic token acquires a pre-stored dynamic token serial number and displays, and sets The system state is a fifth preset state, the adding the seed data flag is reset, and step h is performed; when the key value is the third preset key value and the system state is the fourth preset state, updating the seed menu index , performing step h;

In the step e, the storing the seed data in the collected light sensing data specifically includes: checking the added seed data flag, and storing the collected light sensing data if the added seed data flag is set The seed data, if the added seed data flag is not set, replaces the seed data corresponding to the seed menu index with the seed data in the collected light sensing data.

Preferably, the step c may further include: if the operation selected by the user is to delete the seed data, displaying the seed data menu, initializing the seed menu index, setting the system state to the tenth preset state, and performing step h;

Correspondingly, the step a further includes: when the key value is the second preset key value and the system state is the tenth preset state, the dynamic token deletes the seed corresponding to the seed menu index. Data, display function menu, initialize function menu index, set system state to second preset state, perform step h; when the key value is the third preset key value and the system state is the tenth preset state, update the location The seed menu index is executed, and step h is performed.

Preferably, the step e may be replaced by: the dynamic token collects the light sense data, and determines whether the serial number in the collected light sense data matches the pre-stored dynamic token serial number, and if it matches, the display is collected. The application information in the light sense data is set to the seventh preset state, and step h is performed. If not, the collected light sense data is cleared, the pre-stored dynamic token serial number is obtained and displayed, and the system state is set. For the fifth preset state, performing step h;

Correspondingly, the step a further includes: when the key value is the second preset key value and the system state is the seventh preset state, the dynamic token stores the seed in the collected light sensing data. Data, generating a dynamic password according to the obtained seed data and displaying, setting the system state to the sixth preset state, and performing step h.

Preferably, in the step e, after the collecting the light sensing data, the determining whether the serial number in the collected light sensing data matches the pre-stored dynamic token serial number may further include: determining whether to collect If the acquisition is completed, it is determined whether the serial number in the collected light sensing data matches the pre-stored dynamic token serial number; if the acquisition is not completed, it is determined whether the acquisition timeout is received, and if the collection timeout is stopped, the light sensing data is stopped, prompting The seed data is timed out, the pre-stored dynamic token serial number is obtained and displayed, the system state is set to the fifth preset state, step h is performed, and the light sensing data is continuously collected if the acquisition does not time out.

Preferably, in the step e, before the collecting the light sensing data, the method further includes: setting the system state to an eighth preset state; after the collecting the light sensing data, determining the collected light sensing data Before the sequence number is matched with the pre-stored dynamic token serial number, the method further includes: determining whether the acquisition is completed, and determining whether the serial number in the collected light-sensing data matches the pre-stored dynamic token serial number; If the acquisition is not completed, it is determined whether the system state is the ninth preset state. If yes, the collection of the light sense data is stopped, the prompting that the seed data has been cancelled, the pre-stored dynamic token serial number is obtained, and the system state is set as described. In the fifth preset state, step h is performed, otherwise the light sensing data is continuously collected;

Correspondingly, in the interrupt processing flow, when the button flag is set, the set button wakes up the flag, and further includes: determining a system state, and acquiring the system state if the system state is the eighth preset state Determining a key value, when the key value is the first preset key value, setting a system state to a ninth preset state, the interrupt processing flow ends, when the key value is not the first preset key value, The interrupt processing flow ends; if the system state is not the eighth preset state, the button wake-up flag is set.

Preferably, in the step a, the method may further include: when the key value is the first preset key value and the system state is the third, fourth or sixth preset state, displaying the function menu, initializing the function menu index And setting the system state to the second preset state, performing step h; setting the system state to the first preset state when the key value is the fourth preset key value, and the system state is not the first preset state, and performing the step h.

Preferably, in the step e, after the storing the seed data in the collected light sensing data, before generating the dynamic password according to the newly stored seed data and displaying the data, the method may further include: acquiring the collected light sensing data. The dynamic password displays the number of bits, and stores the obtained dynamic password display digits corresponding to the obtained seed data;

Correspondingly, in the step e, the generating a dynamic password according to the newly stored seed data, and displaying, specifically: generating a dynamic password according to the newly stored seed data, and then dynamically generating the generated data according to the latest stored dynamic password display digits. Password, showing the data obtained by interception;

In the step d, the generating a dynamic password according to the read seed data, and displaying, specifically: generating a dynamic password according to the read seed data, corresponding to the read seed data stored in the dynamic token The dynamic password display digits intercept the generated dynamic password and display the intercepted data.

Preferably, in the interrupt processing flow, when the button interrupt flag is not set, the method may further include: determining whether the RTC interrupt flag is set, and setting the RTC wake-up flag to reset the RTC interrupt flag. The interrupt processing flow ends, otherwise the interrupt processing flow ends; wherein, when the RTC interrupt is triggered, the RTC interrupt flag is set;

Correspondingly, the step S3 is replaced by: the dynamic token determines whether there is a wake-up flag that is set, and if there is a wake-up flag that is set, the RTC wake-up flag and the button wake-up flag are sequentially checked, if When the button wake-up flag is set, the button processing flow is entered. After the button processing flow ends, step S3 is re-executed. If the RTC wake-up flag is set, the RTC processing flow is entered, and the RTC is executed. After the processing flow ends, step S3 is re-executed; if there is no wake-up flag set, the dynamic token enters a sleep mode, waits for being awakened, and returns to step S2;

The RTC processing flow includes:

Step X1) The dynamic token decrements the number of RTC interrupts, determines whether the RTC interrupt number is a preset number of times, if yes, resets the RTC wake-up flag, and performs step X2; otherwise, step X2 is performed;

Step X2) The dynamic token increments the first parameter and the second parameter, respectively, to determine whether the first parameter and the second parameter reach a corresponding threshold, and if the first parameter reaches a threshold of the first parameter, And setting the first parameter to be an initial value thereof, updating a first time factor stored in the dynamic token, and if the second parameter reaches a threshold of the second parameter, setting the second parameter to The initial value, the second time factor stored in the dynamic token is updated, and then step X3 is performed; if the first parameter and the second parameter do not reach the corresponding threshold, step X3 is directly executed;

Step X3) The dynamic token updates the calibration count value, determines whether the first parameter is equal to the preset value, and if yes, performs step X4; otherwise, the RTC processing flow ends;

Step X4) The dynamic token determines whether it is necessary to calibrate the first parameter and the second parameter according to the calibration count value and a calibration value stored in the dynamic token, and according to the calibration Updating the first parameter, the second parameter, and the calibration count value by the value and the calibration count value, the RTC processing flow ends, otherwise the RTC processing flow ends;

Further, after the storing the seed data in the collected light sensing data, generating the dynamic password according to the newly stored seed data and displaying the dynamic data, the method further includes: acquiring dynamic token mode information from the collected light sensing data, If the obtained dynamic token mode information is an event type, the obtained dynamic token mode information is stored corresponding to the acquired seed data, and an event factor corresponding to the acquired seed data is set, and if obtained, The dynamic token mode information is the first time mode or the second time mode, and the obtained dynamic token mode information is stored corresponding to the obtained seed data;

In the step e, the generating a dynamic password according to the newly stored seed data includes: checking the newly stored dynamic token mode information, and if it is an event mode, generating according to the newly stored seed data and the newly set event factor. a dynamic password, if it is the first time mode, generating a dynamic password according to the newly stored seed data and the first time factor in the dynamic token, and if it is the second time mode, according to the newly stored seed data and the The second time factor in the dynamic token generates a dynamic password;

In the step d, the generating a dynamic password according to the read seed data includes: checking dynamic token mode information corresponding to the read seed data stored in the dynamic token, if the event is an event a mode, the dynamic password is generated according to the read seed data and an event factor corresponding to the read seed data stored in the dynamic token, and if it is the first time mode, according to the read seed data and The first time factor in the dynamic token generates a dynamic password, and if it is the second time mode, generates a dynamic password according to the read seed data and a second time factor in the dynamic token;

Before or after generating the dynamic password according to the newly stored seed data and the newly set event factor, the method further includes: updating the newly set event factor;

Before or after generating the dynamic password according to the read seed data and the event factor corresponding to the read seed data stored in the dynamic token, the method further includes: updating an event corresponding to the read seed data factor;

The RTC processing flow further includes: detecting whether the dynamic token is opened, and clearing the sensitive data stored in the dynamic token when the dynamic token is detected to be opened, and setting the open flag Wherein the sensitive data includes seed data;

In the step b, before the function menu is displayed, the method further includes: checking whether the open shell flag is set, and prompting that the dynamic token has self-destructed, performing step h, otherwise displaying a function menu;

In the step X4, when the first parameter and the second parameter are not required to be calibrated, and updating the first parameter, the second parameter, and according to the calibration value and the calibration count value After the calibration of the count value, the method further includes: checking a system state, if the system state is the first preset state, the RTC processing flow ends, and if the system state is not the first preset state, decrementing the automatic shutdown time If the automatic shutdown time is equal to the preset time, the display is powered off, the system state is set to the first preset state, and the RTC processing flow ends, if the automatic shutdown time is not equal to the preset Time, the RTC processing flow ends;

In the button processing procedure, before the step a, the method further includes: resetting the automatic shutdown time;

In the step e, after the seed data in the collected light sensing data is stored, the dynamic password is generated and displayed according to the newly stored seed data, and the method further includes: obtaining the seed data validity period from the collected light sensing data, And storing the obtained seed data validity period corresponding to the obtained seed data;

In the step X2, when the second parameter reaches the threshold of the second parameter, the method further includes: checking whether the various sub-data is based on the validity period of the seed data corresponding to the various sub-data stored in the dynamic token. Expiration, and update the seed data validity period corresponding to the unexpired seed data, and set the seed data invalidation flag corresponding to the expired seed data;

In the step d, before the dynamic password is generated according to the read seed data, the method further includes: checking whether the seed data invalidation flag corresponding to the read seed data is set, if yes, prompting the seed data to be invalid, and performing step h ,no Generating a dynamic password based on the read seed data;

The dynamic token determines whether the first parameter and the second parameter need to be calibrated according to the calibration count value and a calibration value pre-stored in the dynamic token, and specifically includes: determining the dynamic token Whether the result of the AND operation of the calibration value and 0x7F is less than the calibration count value, and the first parameter and the second parameter need to be calibrated, otherwise the first parameter and the first parameter are not required. Two parameters for calibration;

The updating the first parameter, the second parameter, and the calibration count value according to the calibration value and the calibration count value specifically includes: updating the calibration count value to its current value minus the calibration a value, checking a highest bit of the calibration value, if the highest bit of the calibration value is 1, updating the first parameter to decrease its current value by 1, and updating the second parameter to decrease its current value by 1; The highest bit of the calibration value is 0, then the first parameter is updated to add 1 to its current value, and the second parameter is updated to add 1 to its current value.

Preferably, in the interrupt processing flow, before the determining whether the button interrupt flag is set, the method further comprises: determining whether the tooling communication interruption flag is set, and setting the tooling communication wake-up flag to reset the tooling communication interruption. Marking, the interrupt processing flow ends, otherwise executing the determining whether the key interrupt flag is set; wherein, when the dynamic token receives the communication data sent by the tooling, triggering the tooling communication interruption, the tooling communication interruption flag is Position;

The step S3 is replaced by: the dynamic token determines whether there is a wake-up flag that is set, and if there is a wake-up flag that is set, the tooling communication wake-up flag and the button wake-up flag are sequentially checked, if the tooling When the communication flag is set, the tooling communication processing flow is entered. After the tooling communication processing flow ends, step S3 is re-executed. If the button wake-up flag is set, the key processing flow is entered, and the button is pressed. After the processing flow ends, step S3 is re-executed, if there is no wake-up flag set, the dynamic token enters the sleep mode, waits for being awakened, and returns to step S2;

The tooling communication processing flow includes:

Step Y1) closing the total interrupt, determining whether the currently received data is the wake-up signal sent by the tooling, and returning the handshake signal to the tooling, continuing to receive the communication data sent by the tooling, and performing step Y2; otherwise, performing the step Y3;

Step Y2) determining the type of the currently received data, if the command to obtain the token hardware information, obtaining the random number in the acquiring token hardware information command, saving the random number, and returning the obtained random number For the tooling, step Y3 is performed. If it is another tooling command, the received tooling command is decrypted according to the random number stored in the dynamic token, the decrypted command is executed, and the execution result is returned to the tooling. Go to step Y3, otherwise go to step Y3;

Step Y3) setting the tooling communication wake-up flag to enable the total interruption, and the tooling communication processing flow ends.

According to the present invention, a user can implement burning of seed data into a dynamic token by operating a dynamic token, and updating seed data in the dynamic token. According to the present invention, the dynamic token can store and manage a plurality of seeds. During the use of the dynamic token, the dynamic password can be generated by using the corresponding seed data according to the user's selection, which is convenient for the user to use, and the unique identifier and seed of the dynamic token. Binding between data ensures the reliability and security of seed data.

DRAWINGS

In order to more clearly illustrate the present invention or the prior art, the drawings will be briefly described below. Obviously, the drawings in the following description are only some embodiments of the present invention, and those skilled in the art can obtain other drawings according to the drawings without any creative work.

FIG. 1 is a flowchart of key processing in a working method of multiple sub-dynamic tokens according to Embodiment 1 of the present invention; FIG.

2 is a flowchart of a working method of multiple sub-dynamic tokens according to Embodiment 2 of the present invention;

3 is a flowchart of an interrupt processing procedure provided in Embodiment 2 of the present invention;

4 is a flowchart of a tooling communication processing flow provided in Embodiment 2 of the present invention;

FIG. 5 is a flowchart of an RTC processing flow provided in Embodiment 2 of the present invention;

FIG. 6 is a flowchart of a button processing procedure according to Embodiment 2 of the present invention.

detailed description

The technical solutions of the present invention will be clearly and completely described in the following with reference to the accompanying drawings. It is obvious that the described embodiments are only a part of the embodiments of the present invention, and not all of the embodiments. All other embodiments obtained by a person skilled in the art based on the embodiments of the present invention without creative efforts are within the scope of the present invention.

Example 1

Embodiment 1 of the present invention provides a working method for a plurality of sub-dynamic tokens, where the method specifically includes:

Step S1: The dynamic token is powered on and initialized, the total interrupt is turned on, the system state is set to the first preset state, and the sleep mode is entered, waiting to be awakened;

Step S2, the dynamic token is awakened when detecting an interrupt, enters an interrupt processing flow, and after the interrupt processing flow ends, step S3 is performed;

Step S3: The dynamic token checks the button wake-up flag. If the button wake-up flag is set, the button processing flow is entered. After the button processing flow ends, the sleep mode is re-entered, waiting to be awakened, returning. Step S2;

In the first embodiment, the button processing flow is as shown in FIG. 1 , and specifically includes:

Step 11: The dynamic token acquires a key value, determines a key value, and a system state. When the key value is the first preset key value and the system state is the first preset state, step 12 is performed; when the key value is the second preset Step 13 is performed when the key value is set and the system state is the second preset state; when the key value is the second preset key value and the system state is the third preset state, step 16 is performed; when the key value is the second preset key And performing step 17 when the value of the system is the fifth preset state; performing step 20 when the key value is the third preset key value and the system state is the second preset state; and when the key value is the third preset key value and Step 21 is performed when the system state is the third preset state; otherwise, step 22 is performed;

Step 12: The dynamic token display function menu, initialize the function menu index, set the system state to the second preset state, and perform step 22;

Step 13: The dynamic token determines the operation selected by the user according to the function menu index. If the operation selected by the user is to generate a password, step 14 is performed. If the operation selected by the user is to write the seed data, step 15 is performed;

Step 14: The dynamic token displays a seed data menu, initializes a seed menu index, sets a system state to a third preset state, and performs step 22;

Step 15: The dynamic token acquires a pre-stored dynamic token serial number and displays it, sets the system state to a fifth preset state, and performs step 22;

Step 16: The dynamic token reads the seed data corresponding to the seed menu index stored in the dynamic token, generates a dynamic password according to the read seed data, and displays the system state as a sixth preset. State, go to step 22;

Step 17: The dynamic token collects the optical sensation data, and determines whether the serial number in the collected optical sensation data matches the pre-stored dynamic token serial number. If yes, go to step 18. If not, go to step 19. ;

Step 18: The dynamic token stores the seed data in the collected light-sensing data, generates a dynamic password according to the newly stored seed data, and displays, sets the system state to the sixth preset state, and performs step 22;

Step 19: The dynamic token clears the collected light sense data, obtains the pre-stored dynamic token serial number and displays it, sets the system state to the fifth preset state, and performs step 22;

Step 20: The dynamic token updates the function menu index, and step 22 is performed;

Step 21: The dynamic token updates the seed menu index, step 22 is performed;

Step 22: The dynamic token resets the button wake-up flag, and the button processing flow ends.

Further, in this embodiment, in step 11, the method further includes: when the key value is the first preset key value and the system state is the third, fourth or sixth preset state, the dynamic token display function menu Initializing the function menu index, setting the system state to the second preset state, performing step 22; setting the system state to the first pre-preparation when the key value is the fourth preset key value and the system state is not the first preset state Set the status and go to step 22.

One or more of the first preset key value, the second preset key value, the third preset key value, and the fourth preset key value correspond to one physical button. When the first preset key value, the second preset key value, the third preset key value, and the fourth preset key value respectively correspond to different physical keys, the dynamic token obtains a corresponding key value by using a physical button; When the plurality of the first preset key value, the second preset key value, the third preset key value, and the fourth preset key value correspond to the same physical button, the dynamic token passes the physical button and/or Press the button mode (such as long press, short press, etc.) to get the corresponding key value.

Example 2

In the key processing flow in the first embodiment, the order of determining the key value and determining the state of the system is not limited. The purpose of the present invention can be achieved by first determining the key value or first determining the system state. In the second embodiment of the present invention, the key value is determined first. An example provides a working method for a plurality of sub-dynamic tokens. As shown in FIG. 2, the method specifically includes:

Step 101: Initialize the dynamic token power-on, open the total interrupt, set the system state to the first preset state, enter the sleep mode, and wake up when the interrupt is detected, and perform step 102.

In the second embodiment, the interrupt includes: tooling communication interruption, RTC interruption, and key interruption.

Step 102: The dynamic token enters the interrupt processing flow for interrupt processing, and sets the corresponding wake-up flag according to the interrupt type. After the interrupt processing flow ends, step 103 is performed;

In this embodiment, the interrupt processing process is as shown in FIG. 3, and specifically includes:

Step A1: determining whether the tooling communication interruption flag is set, if yes, executing step A2, otherwise performing step A3;

Step A2: reset the tooling communication interrupt flag, set the tooling communication wake-up flag, and the interrupt processing flow ends;

Step A3: determining whether the button interrupt flag is set, if yes, executing step A4, otherwise performing step A8;

Step A4: determining whether the system state is the eighth preset state, if yes, executing step A5, otherwise performing step A7;

Step A5: Acquire a key value, determine whether it is the first preset key value, if yes, execute step A6, otherwise the interrupt processing flow ends;

Step A6: setting the system state to the ninth preset state, and the interrupt processing flow ends;

Step A7: reset the button interrupt flag, set the button wake-up flag, and the interrupt processing flow ends;

Step A8: determining whether the RTC interrupt flag is set, if yes, executing step A9, otherwise the interrupt processing flow ends;

Step A9: Reset the RTC interrupt flag, update the RTC interrupt count, set the RTC wake-up flag, and the interrupt processing flow ends.

In the second embodiment, when the token receives the communication data sent by the tooling, the communication interruption is triggered, the communication interruption flag is set, and when the button of the token is pressed, the button is interrupted, the key interrupt flag is set, and the RTC is interrupted. Trigger once per second, when the RTC interrupt is triggered, the RTC interrupt flag is set.

In the interrupt processing flow described in the second embodiment, when the RTC interrupt flag is set, the specific update RTC interrupt number is incremented by one for its current number.

Step 103: The dynamic token determines whether there is a wake-up flag that is set, if yes, step 104 is performed; otherwise, the dynamic token enters a sleep mode, and when the interrupt is detected, it is awakened, and returns to step 102;

Step 104: The dynamic token sequentially checks each wake-up flag. If the tooling communication wake-up flag is set, step 105 is performed. If the RTC wake-up flag is set, step 106 is performed, and if the button wake-up flag is set, the step is performed. 107;

The wake-up flag described in the second embodiment includes: a tooling communication wake-up flag, an RTC wake-up flag, and a button wake-up flag. Preferably, the dynamic token sequentially checks each wake-up according to the tooling communication wake-up flag, the RTC wake-up flag, and the button wake-up flag. Sign.

Step 105: The dynamic token enters the tooling communication processing flow, and after the tooling communication processing flow ends, the process returns to step 103;

In the second embodiment, the dynamic token entering the tooling communication processing flow is as shown in FIG. 4, and specifically includes the dynamic token performing the following operations:

Step B1: closing the total interrupt, determining whether the currently received data is a wake-up signal sent by the tooling, if yes, executing step B2, otherwise performing step B9;

Step B2: returning a handshake signal to the tooling, and continuing to receive the communication data sent by the tooling;

Step B3: determining whether the length of the data in the currently received data is greater than a preset length, if yes, executing step B9, otherwise performing step B4;

In this embodiment, the preset length is 50 bytes.

Step B4: continue to receive communication data sent by the tooling according to the length of the data;

Step B5: Verify that the currently received data is correct, if yes, go to step B6, otherwise go to step B9;

Step B6: determining the type of data currently received, if it is a preset tooling command, executing step B7, if it is another tooling command, executing step B8, otherwise executing step B9;

The preset tooling command described in the second embodiment of the present embodiment is a command to acquire a token hardware information sent by the tooling.

Step B7: Obtain a random number in the preset tooling command, save the obtained random number, and return the obtained random number to the tool, and perform step B9;

Step B8: Decrypt the received tooling command according to the random number stored in the token, execute the decrypted command, and return the execution result to the tooling, and execute step B9;

In the second embodiment, the other tooling commands include: a write time factor command; and the executing the write time factor command after the decryption, specifically comprising: storing a time factor in the write time factor command, the time factor including the first time factor and the second Time factor.

Step B9: reset the tooling communication wake-up flag, enable the total interrupt, and the tooling communication processing flow ends.

Step 106: The dynamic token enters the RTC processing flow, and returns to step 103 after the end of the RTC processing flow;

In the second embodiment, the dynamic token enters the RTC processing flow as shown in FIG. 5, which specifically includes the dynamic token performing the following operations:

Step C1: Decrement the number of RTC interruptions;

In step C1 of this embodiment, the number of times of decrementing the RTC interrupt is specifically to update the number of RTC interrupts to be the current number of times minus 1;

Step C2: determining whether the number of RTC interruptions is a preset number of times, if yes, performing step C3, otherwise performing step C4;

In this embodiment, the preset number of times is 0 times.

Step C3: reset the RTC wakeup flag, and perform step C4;

Step C4: incrementing the first parameter and the second parameter;

In the second embodiment, the initial values of the first parameter and the second parameter are both 0, and the incrementing the first parameter and the second parameter are specifically: updating the first parameter to add 1 to its current value, and updating the second parameter to its current value. plus 1;

Step C5: determining whether the first parameter reaches the threshold of the first parameter, if yes, executing step C6, otherwise performing step C7;

In the second embodiment, the threshold of the first parameter is 30.

Step C6: setting the first parameter to its initial value, incrementing the first time factor, and performing step C7;

In the second embodiment, the increasing the first time factor is specifically updating the first time factor to increase its current value by one;

Step C7: determining whether the second parameter reaches the threshold of the second parameter, if yes, executing step C8, otherwise performing step C9;

In the second embodiment, the threshold of the second parameter is 60.

Step C8: setting the second parameter to its initial value, incrementing the second time factor, and performing step C9;

In the second embodiment, the increasing the second time factor is specifically updating the second time factor to increase its current value by one;

Step C9: incrementing the calibration count value;

In the second embodiment, the incremental calibration count value is specifically that the updated calibration count value is increased by 1;

Step C10: determining whether the first parameter is equal to the preset value, if yes, executing step C11, otherwise performing step C13;

In the second embodiment, the preset value is 15;

Step C11: judging whether it is necessary to calibrate the first parameter and the second parameter according to the calibration count value and the calibration value stored in the token, if yes, step C12 is performed, otherwise step C13 is performed;

In the second embodiment, the step C11 specifically includes: determining whether the calibration value &0x7F is smaller than the calibration count value, if the calibration of the first parameter and the second parameter is required, performing step C12, otherwise the first parameter and the second parameter are not required. Perform calibration and perform step C13.

Step C12: The first parameter and the second parameter are calibrated according to the calibration value and the calibration count value, and the calibration count value is updated, and step C13 is performed;

In the second embodiment, the update calibration count value is the current value minus the calibration value, and the highest value of the calibration value is checked. If the highest value of the calibration value is 1, the first parameter is calibrated to its current value minus 1, and the second value is The parameter calibration is decremented by 1 for its current value. If the highest bit of the calibration value is 0, the first parameter is calibrated to its current value plus one, and the second parameter is calibrated to its current value plus one.

Step C13: detecting whether the token is unpacked, if yes, proceeding to step C14, otherwise performing step C15;

Step C14: Clearing the sensitive data stored in the token, setting the open flag, and ending the RTC processing flow;

Step C15: Check the system status, if it is the first preset state, the RTC processing flow ends, otherwise step C16 is performed;

Step C16: Decrement the automatic shutdown time, determine whether the automatic shutdown time is the preset time, if yes, execute step C17, otherwise the RTC processing flow ends;

In the second embodiment, the decrement automatic shutdown time is specifically that the update automatic shutdown time is reduced by 1 for the current time, and the preset time is 0;

Step C17: Power off the display, set the system state to the first preset state, and the RTC processing flow ends.

The sensitive data described in the second embodiment is data that requires confidentiality and brings security risks once it is illegally acquired, including all seed data and the like.

Step 107: The dynamic token enters the button processing flow, and after the button processing flow ends, the process returns to step 103;

In the second embodiment, the dynamic token entry button processing flow is as shown in FIG. 6, and specifically includes the dynamic token performing the following operations:

Step D0: obtaining a key value, determining whether the key value is valid, if yes, performing step D1, otherwise performing step D32;

Step D1: reset the automatic shutdown time, check the key value, if it is the first preset key value, perform step D2, if it is the second preset key value, perform step D8, if it is the third preset key value, perform the step D29, otherwise step D32;

Step D2: counting the time when the button is pressed, determining whether the time when the button is pressed exceeds the preset duration, if yes, executing step D3, otherwise performing step D5;

Specifically, step D2 includes:

Step i. Initialize the count value of the timer, turn on the timer to start timing;

In the second embodiment, the count value of the initialization timer is 0;

Step ii. determining whether the count value of the timer reaches a preset duration, if the button is pressed for more than the preset duration, the timer is turned off, step D3 is performed, otherwise step iii is performed;

In the second embodiment, the preset duration is 1 second;

Step iii. Determine whether the button state is pressed, if yes, return to step ii, otherwise the button is pressed for less than the preset duration, the timer is turned off, and step D5 is performed.

Step D3: Check the system status, if it is the first preset state, execute step D32, otherwise perform step D4;

Step D4: power off the display, set the system state to the first preset state, and perform step D32;

Step D5: Check the system status. If it is the first preset state, execute step D6. If it is the third, fourth, fifth, sixth, seventh or tenth preset state, execute step D7, otherwise execute Step D32;

Step D6: power on the display, set the system state to the second preset state, initialize the function menu index, write the function menu to the display buffer area, and identify the selected function item according to the function menu index, and perform step D32;

Step D7: setting the system state to the second preset state, initializing the function menu index, and writing the function menu to the display Cache area, and according to the function menu index to identify the selected function item, step D32;

In the second embodiment, the function menu includes generating a password entry, updating a seed entry, and adding a seed entry.

Step D8: Checking the system status, if it is the second preset state, executing step D9, if it is the third preset state, executing step D14, if it is the fourth preset state, performing step D15, if it is the fifth preset state Step D16 is performed, if it is the sixth preset state, step D24 is performed, if it is the seventh preset state, step D25 is performed, if it is the tenth preset state, step D28 is performed, otherwise step D32 is performed;

Step D9: Determine the selected function entry according to the function menu index. If the password entry is generated, step D10 is performed. If the seed entry is updated, step D11 is performed. If the seed entry is added, step D12 is performed, and if the seed entry is deleted, Go to step D13, otherwise go to step D32;

Step D10: setting the system state to the third preset state, initializing the seed menu index, writing the seed menu to the display buffer area, and identifying the selected seed entry according to the seed menu index, performing step D32;

Preferably, in the second embodiment, the seed menu includes application information corresponding to various sub-data stored in the dynamic token.

Step D11: setting the system state to the fourth preset state, initializing the seed menu index, writing the seed menu to the display buffer area, and identifying the selected seed entry according to the seed menu index, performing step D32;

Step D12: The pre-stored serial number in the dynamic token is written into the display buffer area, the system state is set to the fifth preset state, the seed data flag is set, and step D32 is performed;

Step D13: setting the system state to the tenth preset state, initializing the seed menu index, writing the seed menu to the display buffer area, and identifying the selected seed entry according to the seed menu index, performing step D32;

Step D14: Searching the corresponding seed data stored in the dynamic token according to the seed menu index, generating a dynamic password according to the found seed data and the dynamic factor stored in the dynamic token, and writing the generated dynamic password into the display buffer area, and setting The system state is the sixth preset state, and step D32 is performed;

Step D15: Write the sequence number pre-stored in the dynamic token into the display buffer area, set the system state to the fifth preset state, reset the add seed data flag, and perform step D32;

Step D16: setting the system state to the eighth preset state, and performing step D17;

Step D17: collecting the light sense data, indicating that the light sense data is being collected, determining whether the light sense data is collected, if yes, performing step D18, otherwise performing step D21;

Step D18: determining whether the serial number in the collected light sense data matches the serial number pre-stored in the dynamic token, if yes, proceed to step D19, otherwise perform step D20;

In the second embodiment, the step D18 is specifically: determining whether the serial number in the collected light sensing data is consistent with the serial number stored in the dynamic token. If yes, step D19 is performed; otherwise, step D20 is performed.

Step D19: setting the system state to the seventh preset state, writing the application information in the collected light sensing data into the display buffer area, prompting the user to confirm, and performing step D32;

Step D20: Clear the collected light sense data, prompt the seed data to be written incorrectly, write the pre-stored serial number in the dynamic token into the display buffer area, set the system state to the fifth preset state, and perform step D32;

Step D21: determining whether the acquisition is timed out, or the system state is the ninth preset state, if the acquisition timeout, step D22 is performed, if the system state is the ninth preset state, step D23 is performed, otherwise returning to step D16;

Step D22: Clear the collected light sense data, prompt the seed data to be programmed to time out, write the pre-stored serial number in the dynamic token to the display buffer area, set the system state to the fifth preset state, and perform step D32;

Step D23: Clear the collected light sense data, prompting that the seed data has been canceled, writing the pre-stored serial number in the dynamic token to the display buffer area, setting the system state to the fifth preset state, and performing step D32;

Step D24: setting the system state to the second preset state, initializing the function menu index, writing the function menu to the display buffer area, and identifying the selected function item according to the function menu index, performing step D32;

Step D25: determining whether the added seed data flag is set, if yes, proceeding to step D26, otherwise performing step D27;

Step D26: storing seed data in the collected light sensing data, and applying the collected information in the light sensing data. Adding to the seed menu, generating a dynamic password according to the newly stored seed data and the dynamic factor stored in the dynamic token, writing the generated dynamic password into the display buffer area, setting the system state to the sixth preset state, executing step D32;

Further, the step D26 may further include: increasing the number of seeds, and correspondingly, in the second embodiment, each time the function menu is written into the output buffer area, the number of seeds is checked, and if the number of seeds reaches the maximum value, The function menu is written to the output buffer except for the addition of the seed entry. If the number of seeds does not reach the maximum value, the entire contents of the function menu are written to the output buffer.

Step D27: replacing the seed data corresponding to the seed menu index with the seed data in the collected light sensing data, and generating a dynamic password according to the newly stored seed data and the dynamic factor stored in the dynamic token, and generating the dynamic password. Write the display buffer area, set the system state to the sixth preset state, and perform step D32;

Step D28: deleting the application information and the seed data corresponding to the seed menu index, setting the system state to the second preset state, initializing the function menu index, writing the function menu to the display buffer area, and selecting the function according to the function menu index identifier. Function entry, step D32;

Further, in step D28, the number of seeds may be decreased.

Step D29: Check the system status, if it is the second preset state, step D30 is performed, if it is the third, fourth or tenth preset state, step D31 is performed, otherwise step D32 is performed;

Step D30: update the function menu index, re-identify the selected function item according to the updated function menu index, and perform step D32;

Step D31: update the seed menu index, re-identify the selected seed entry according to the updated seed menu index, step D32;

Step D32: Reset the button wake-up flag, and the button processing flow ends.

Further, in the second embodiment:

The light data may also include the validity period of the seed data, correspondingly:

In step C9 of the RTC processing flow, the method further includes determining, according to the validity period of the various sub-data stored in the dynamic token, whether the corresponding various sub-data expires, and then setting the corresponding seed data invalidation flag, and then performing step C9, otherwise updating The various sub-data valid periods stored in the dynamic token are then executed in step C9; specifically, it can be determined whether the corresponding various sub-data is expired by determining whether the various sub-data valid periods stored in the dynamic token are 0, and the seed The seed data whose data validity period is 0 expires, the seed data whose seed data validity period is not 0 has not expired, and the seed data validity period of the updated unexpired seed data is reduced by 1 for its current value;

In step D14 of the button processing flow, after the seed data is found, the method further includes checking whether the seed data invalidation flag corresponding to the seed data is set, and if yes, prompting the seed data to be invalid, performing step D32, otherwise, according to the found seed data and dynamics. The dynamic factor calculation stored in the token generates a dynamic password; in step D26, the method further includes storing the seed data validity period in the collected light sensing data; and in step D27, further comprising replacing the seed data validity period in the collected light sensing data. The seed data validity period of the seed data corresponding to the seed menu index;

The light sensitivity data may also include a dynamic password display digit, correspondingly:

The step D26 of the key processing flow further includes storing the dynamic password display digits in the collected light sensing data; and in step D27, further comprising: replacing the dynamic password display digits in the collected light sensing data with the seed menu index The dynamic password display bit number of the corresponding seed data; in step D14, step D26 and step D27, the generated dynamic password is written into the display buffer area, and the generated dynamic password is intercepted according to the corresponding dynamic password display digits. , the data obtained by the interception is written into the display buffer area;

For example, if the number of dynamic password display bits corresponding to the seed data on which the dynamic password is generated is 6, the last 6 bits of the generated dynamic password are intercepted and written into the display buffer area;

The dynamic sensation mode information may further include dynamic token mode information, where the dynamic token mode information includes: an event mode, a first time mode, and a second time mode, respectively:

In step D26 of the button processing flow, before generating the dynamic password, the method further includes: storing the dynamic token mode information in the collected light sensing data, and if the dynamic token mode information is the event mode, further including setting the event corresponding to the seed data. The component factor; the step D27, further comprising: replacing the dynamic token mode information of the seed data corresponding to the seed menu index with the dynamic token mode information in the collected light sensing data, if the dynamic information in the collected light sensing data The token mode information is an event mode, and further includes: resetting an event factor corresponding to the seed data corresponding to the seed menu index; and generating a dynamic password according to the found seed data and the dynamic factor stored in the dynamic token in step D14, The method includes: reading the dynamic token mode information and the dynamic factor corresponding to the found seed data stored in the dynamic token, and if the event mode is, reading the corresponding to the found seed data stored in the dynamic token. The event factor generates a dynamic password according to the found seed data and the read event factor; if it is the first time mode, reads the first time factor stored in the dynamic token, according to the found seed data and the read The first time factor obtained is calculated to generate a dynamic password; if it is the second time mode, the read is stored in the dynamic token The second time factor generates a dynamic password according to the found seed data and the read second time factor; wherein, when the dynamic password is generated according to the found seed data and the read event factor, the dynamic password is generated Before or after, the method further includes: updating an event factor corresponding to the found seed data stored in the dynamic token; and generating a dynamic password according to the latest stored seed data and the dynamic factor stored in the dynamic token in step D26 and step D27; Specifically, the method includes: checking dynamic token mode information corresponding to the newly stored seed data, and if the event mode is, generating a dynamic password according to the newly stored seed data and the event factor; if the first time mode, according to the latest storage The seed data and the first time factor calculation generate a dynamic password; if it is the second time mode, generate a dynamic password according to the newly stored seed data and the second time factor; wherein, when the calculation is generated according to the newly stored seed data and the event factor Dynamic password when generating a dynamic password Or after further comprising: dynamic factor update event stored in the token.

The embodiment 1-2 described above is only a preferred embodiment of the present invention, and the usual changes and substitutions made by those skilled in the art within the scope of the present invention are included in the scope of the present invention.

Claims

A method for working a plurality of sub-dynamic tokens, comprising:

Step S1) The dynamic token is powered on and initialized, the total interrupt is turned on, the system state is set to the first preset state, and the sleep mode is entered, waiting to be awakened;

Step S2) the dynamic token is awakened when detecting an interrupt, enters an interrupt processing flow, and after the end of the interrupt processing flow, step S3 is performed;

The interrupt processing procedure includes: the dynamic token determines whether the button interrupt flag is set, and if the button wake-up flag is set, resetting the button interrupt flag, the interrupt processing flow ends, otherwise the interrupt processing flow ends, wherein, when When the button of the dynamic token is pressed, the button interrupt is triggered, and the button interrupt flag is set;

Step S3) The dynamic token checks the button wake-up flag. If the button wake-up flag is set, the button processing flow is entered. After the button processing flow ends, the sleep mode is re-entered, waiting to be awakened, returning. Step S2;

The button processing flow includes:

Step a) the dynamic token acquires a key value, determines a key value and a system state, and when the key value is the first preset key value and the system state is the first preset state, performing step b; when the key value is the second pre- Step c is performed when the key value is set and the system state is the second preset state; step d is performed when the key value is the second preset key value and the system state is the third preset state; and when the key value is the second preset key Step e is performed when the value is the fifth preset state, and step f is performed when the key value is the third preset key value and the system state is the second preset state; when the key value is the third preset key value and Step g is performed when the system state is the third preset state; otherwise, step h is performed;

Step b) the dynamic token display function menu, initialize the function menu index, set the system state to the second preset state, and perform step h;

Step c) The dynamic token determines an operation selected by the user according to the function menu index. If the operation selected by the user is to generate a password, the seed data menu is displayed, the seed menu index is initialized, and the system state is set to a third preset state. Step h is performed. If the operation selected by the user is to write the seed data, the pre-stored dynamic token serial number is obtained and displayed, and the system state is set to the fifth preset state, and step h is performed;

Step d) The dynamic token reads the seed data corresponding to the seed menu index stored in the dynamic token, generates a dynamic password according to the read seed data, and displays the system state as a sixth preset. Status, step h;

Step e) The dynamic token collects light sensing data, and determines whether the serial number in the collected light sensing data matches the pre-stored dynamic token serial number, and if yes, stores the seed data in the collected light sensing data. And generating a dynamic password according to the newly stored seed data, displaying, setting the system state to the sixth preset state, performing step h, if not, clearing the collected light sensing data, and acquiring the pre-stored dynamic token serial number And displaying, setting the system state to the fifth preset state, performing step h;

Step f) the dynamic token updates the function menu index, performing step h;

Step g) the dynamic token updating the seed menu index, performing step h;

Step h) The dynamic token resets the button wake-up flag, and the button processing flow ends.
The method of claim 1, wherein the step c further comprises: if the user selects an operation to update the seed data, the dynamic token displays a seed data menu, initializes a seed menu index, and sets a system state. For the fourth preset state, performing step h;

In the step c, when the operation selected by the user is to write the seed data, the method further includes: setting the added seed data flag;

The step a further includes: when the key value is the second preset key value and the system state is the fourth preset state, the dynamic token acquires a pre-stored dynamic token serial number and displays, and sets The system state is a fifth preset state, resetting the added seed data flag, performing step h; when the key value is a third preset key value and the system state is the fourth pre- When the state is set, the seed menu index is updated, and step h is performed;

In the step e, the storing the seed data in the collected light sensing data specifically includes: checking the added seed data flag, and storing the collected light sensing data if the added seed data flag is set The seed data, if the added seed data flag is not set, replaces the seed data corresponding to the seed menu index with the seed data in the collected light sensing data.
The method of claim 1, wherein the step c further comprises: if the operation selected by the user is to delete the seed data, displaying the seed data menu, initializing the seed menu index, and setting the system state to the tenth pre- Set the state, execute step h;

The step a further includes: when the key value is the second preset key value and the system state is the tenth preset state, the dynamic token deletes the seed data corresponding to the seed menu index, and displays The function menu, initializing the function menu index, setting the system state to the second preset state, performing step h; updating the seed menu when the key value is the third preset key value and the system state is the tenth preset state Index, execute step h.
The method according to claim 1, wherein the step e is replaced by: the dynamic token collecting light sensing data, determining the serial number in the collected light sensing data and the pre-stored dynamic token serial number Whether it matches, if it matches, the application information in the collected light-sensing data is displayed, and the system state is set to the seventh preset state, and step h is performed. If not, the collected light-sensing data is cleared, and the pre-stored dynamic order is obtained. The card serial number is displayed, the system state is set to the fifth preset state, and step h is performed;

The step a further includes: when the key value is the second preset key value and the system state is the seventh preset state, the dynamic token stores the seed data in the collected light sensing data, according to The obtained seed data generates a dynamic password and displays, sets the system state to the sixth preset state, and performs step h.
The method according to claim 1, wherein in the step e, after the collecting the light sensing data, determining whether the serial number in the collected light sensing data and the pre-stored dynamic token serial number are Before the matching, the method further includes: determining whether the collection is completed, and determining whether the serial number in the collected light sensing data matches the pre-stored dynamic token serial number; if the acquisition is not completed, determining whether the acquisition timeout occurs, If the timeout expires, the optical data is stopped, the seed data is timed out, the pre-stored dynamic token serial number is obtained, and the system state is set to the fifth preset state. Step h is performed. If the acquisition does not expire, the collection continues. Light sense data.
The method according to claim 1, wherein in the step e, before the collecting the light sensing data, the method further comprises: setting the system state to an eighth preset state; after the collecting the light sensing data, the method Before determining whether the serial number in the collected light sensing data matches the pre-stored dynamic token serial number, the method further includes: determining whether the acquisition is completed, and determining the serial number in the collected light sensing data and pre-storing if the collecting is completed. Whether the dynamic token serial number matches; if the acquisition is not completed, it is determined whether the system state is the ninth preset state, and then the collection of the light sensing data is stopped, indicating that the seed data has been canceled, and the pre-stored dynamic token serial number is obtained. And displaying, setting the system state to the fifth preset state, performing step h, otherwise continuing to collect the light sense data;

In the interrupt processing flow, when the button flag is set, before the set button wakes up the flag, the method further includes: determining a system state, and acquiring and determining the key value if the system state is the eighth preset state When the key value is the first preset key value, setting the system state to the ninth preset state, the interrupt processing flow ends, and when the key value is not the first preset key value, the interrupt The processing flow ends; if the system state is not the eighth preset state, the button wake-up flag is set.
The method of claim 1, wherein the step a further comprises: when the key value is the first preset key value and the system state is the third, fourth or sixth preset state Display function menu, initialize function menu index, set system state to second preset state, execute step h; set system state to when the key value is the fourth preset key value and the system state is not the first preset state In the first preset state, step h is performed.
The method according to claim 1, wherein in the step e, after the seed data in the collected light sensing data is stored, and the dynamic password is generated according to the newly stored seed data and displayed, the method further includes: Obtain the dynamic password display digits from the collected light sensitivity data, and obtain the obtained dynamic password display digits and the obtained species Subdata corresponding storage;

In the step e, the generating a dynamic password according to the newly stored seed data, and displaying, specifically: generating a dynamic password according to the newly stored seed data, and then displaying the generated dynamic password according to the latest stored dynamic password display digit, and displaying Obtain the data obtained;

In the step d, the generating a dynamic password according to the read seed data, and displaying, specifically: generating a dynamic password according to the read seed data, corresponding to the read seed data stored in the dynamic token The dynamic password display digits intercept the generated dynamic password and display the intercepted data.
The method according to claim 1, wherein in the interrupt processing flow, when the key interrupt flag is not set, the method further comprises: determining whether the RTC interrupt flag is set, and setting the RTC to wake up. a flag, resetting the RTC interrupt flag, the interrupt processing flow ends, otherwise the interrupt processing flow ends; wherein, when the RTC interrupt is triggered, the RTC interrupt flag is set;

The step S3 is replaced by: the dynamic token determines whether there is a wake-up flag that is set, and if there is a wake-up flag that is set, the RTC wake-up flag and the button wake-up flag are sequentially checked, if the button wakes up When the flag is set, the button processing flow is entered. After the button processing flow ends, step S3 is re-executed. If the RTC wake-up flag is set, the RTC processing flow is entered, and the RTC processing flow ends. Afterwards, step S3 is re-executed; if there is no wake-up flag set, the dynamic token enters a sleep mode, waits for being awakened, and returns to step S2;

The RTC processing flow includes:

Step X1) The dynamic token decrements the number of RTC interrupts, determines whether the RTC interrupt number is a preset number of times, if yes, resets the RTC wake-up flag, and performs step X2; otherwise, step X2 is performed;

Step X2) The dynamic token increments the first parameter and the second parameter, respectively, to determine whether the first parameter and the second parameter reach a corresponding threshold, and if the first parameter reaches a threshold of the first parameter, And setting the first parameter to be an initial value thereof, updating a first time factor stored in the dynamic token, and if the second parameter reaches a threshold of the second parameter, setting the second parameter to The initial value, the second time factor stored in the dynamic token is updated, and then step X3 is performed; if the first parameter and the second parameter do not reach the corresponding threshold, step X3 is directly executed;

Step X3) The dynamic token updates the calibration count value, determines whether the first parameter is equal to the preset value, and if yes, performs step X4, otherwise the RTC processing flow ends;

Step X4) The dynamic token determines whether it is necessary to calibrate the first parameter and the second parameter according to the calibration count value and a calibration value stored in the dynamic token, and according to the calibration The value and the calibration count value update the first parameter, the second parameter, and the calibration count value, the RTC processing flow ends, otherwise the RTC processing flow ends.
The method according to claim 9, wherein in the step e, after the seed data in the collected light sensing data is stored, and the dynamic password is generated according to the newly stored seed data and displayed, the method further includes: The dynamic token mode information is obtained from the collected light sensation data. If the obtained dynamic token mode information is event type, the obtained dynamic token mode information is stored corresponding to the obtained seed data, and is set and configured. And the event token corresponding to the acquired seed data, if the obtained dynamic token mode information is the first time mode or the second time mode, storing the obtained dynamic token mode information and the acquired seed data. ;

In the step e, the generating a dynamic password according to the newly stored seed data includes: checking the newly stored dynamic token mode information, and if it is an event mode, generating according to the newly stored seed data and the newly set event factor. a dynamic password, if it is the first time mode, generating a dynamic password according to the newly stored seed data and the first time factor in the dynamic token, and if it is the second time mode, according to the newly stored seed data and the The second time factor in the dynamic token generates a dynamic password;

In the step d, the generating a dynamic password according to the read seed data includes: checking dynamic token mode information corresponding to the read seed data stored in the dynamic token, if the event is an event a mode, the dynamic password is generated according to the read seed data and an event factor corresponding to the read seed data stored in the dynamic token, and if it is the first time mode, according to the read seed data and First time factor generation in the dynamic token The dynamic password, if it is the second time mode, generates a dynamic password according to the read seed data and the second time factor in the dynamic token.
The method according to claim 10, wherein the generating the dynamic password before or after the latest stored seed data and the newly set event factor further comprises: updating the newly set event factor;

Before or after generating the dynamic password according to the read seed data and the event factor corresponding to the read seed data stored in the dynamic token, the method further includes: updating an event corresponding to the read seed data factor.
The method of claim 9, wherein the RTC processing flow further comprises: detecting whether the dynamic token is unpacked, and clearing the dynamic when detecting that the dynamic token is unpacked Sensitive data stored in the token, the open shell flag is set; wherein the sensitive data includes seed data;

In the step b, before the function menu is displayed, the method further includes: checking whether the open shell flag is set, and indicating that the dynamic token has self-destructed, performing step h, otherwise displaying the function menu.
The method according to claim 9, wherein in the step X4, when the first parameter and the second parameter are not required to be calibrated, and according to the calibration value and the calibration count value After updating the first parameter, the second parameter, and the calibration count value, the method further includes: checking a system state, if the system state is the first preset state, the RTC processing flow ends, if the system state is not Determining the automatic shutdown time for the first preset state, if the automatic shutdown time is equal to the preset time, powering off the display screen, setting the system state to the first preset state, and ending the RTC processing flow If the automatic shutdown time is not equal to the preset time, the RTC processing flow ends;

In the button processing procedure, before the step a, the method further includes: resetting the automatic shutdown time.
The method according to claim 9, wherein in the step e, after the seed data in the collected light sensing data is stored, and the dynamic password is generated according to the newly stored seed data and displayed, the method further includes: Obtaining a validity period of the seed data from the collected light sensation data, and storing the obtained seed data validity period corresponding to the obtained seed data;

In the step X2, when the second parameter reaches the threshold of the second parameter, the method further includes: checking whether the various sub-data is based on the validity period of the seed data corresponding to the various sub-data stored in the dynamic token. Expiration, and update the seed data validity period corresponding to the unexpired seed data, and set the seed data invalidation flag corresponding to the expired seed data;

In the step d, before the dynamic password is generated according to the read seed data, the method further includes: checking whether the seed data invalidation flag corresponding to the read seed data is set, if yes, prompting the seed data to be invalid, and performing step h Otherwise, a dynamic password is generated based on the read seed data.
The method according to claim 9, wherein said dynamic token determines whether said first parameter and said second need to be performed based on said calibration count value and a calibration value pre-stored in said dynamic token The parameter is calibrated, specifically: the dynamic token determines whether the calibration value and the result of the AND operation performed by the 0x7F are smaller than the calibration count value, and the first parameter and the second parameter need to be calibrated. Otherwise, the first parameter and the second parameter need not be calibrated.
The method according to claim 15, wherein said updating said first parameter, said second parameter and said calibration count value according to said calibration value and said calibration count value comprises: The calibration count value is the current value minus the calibration value, and the highest bit of the calibration value is checked. If the highest bit of the calibration value is 1, the first parameter is updated to be the current value minus 1, and the update is performed. The second parameter is decremented by 1 for its current value; if the highest bit of the calibration value is 0, the first parameter is updated to add 1 to its current value, and the second parameter is updated to add 1 to its current value.
The method according to claim 1, wherein in the interrupt processing flow, before the determining whether the button interrupt flag is set, the method further comprises: determining whether the tooling communication interruption flag is set, and setting the tooling a communication wake-up flag, resetting the tooling communication interruption flag, the interrupt processing flow ends, otherwise executing the determining whether the key interrupt flag is set; wherein the dynamic token triggers the tool when receiving the communication data sent by the tooling The communication is interrupted, and the tooling communication interruption flag is set;

The step S3 is replaced by: the dynamic token determines whether there is a wake-up flag that is set, if there is a call that is set The wake-up flag sequentially checks the tooling communication wake-up flag and the button wake-up flag, and if the tool-fit communication flag is set, enters a tooling communication processing flow, and after the tooling communication processing flow ends, step S3 is re-executed. If the button wake-up flag is set, the button processing flow is entered. After the button processing flow ends, step S3 is re-executed, and if the wake-up flag is not set, the dynamic token enters a sleep mode. Waiting to be awakened, returning to step S2;

The tooling communication processing flow includes:

Step Y1) closing the total interrupt, determining whether the currently received data is the wake-up signal sent by the tooling, and returning the handshake signal to the tooling, continuing to receive the communication data sent by the tooling, and performing step Y2; otherwise, performing the step Y3;

Step Y2) determining the type of the currently received data, if the command to obtain the token hardware information, obtaining the random number in the acquiring token hardware information command, saving the random number, and returning the obtained random number For the tooling, step Y3 is performed. If it is another tooling command, the received tooling command is decrypted according to the random number stored in the dynamic token, the decrypted command is executed, and the execution result is returned to the tooling. Go to step Y3, otherwise go to step Y3;

Step Y3) setting the tooling communication wake-up flag to enable the total interruption, and the tooling communication processing flow ends.